Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OzFdh-JATx2gvdoaYwFyuEh_Pj0.roa
File:                     OzFdh-JATx2gvdoaYwFyuEh_Pj0.roa (raw, json)
Hash identifier:          C0HD68bMU2DGvliSN/LdLJbrq+gp+kyU1MwrhmglHRk=
Subject key identifier:   3B:31:5D:87:E2:40:4F:1D:A0:BD:DA:1A:63:01:72:B8:48:7F:3E:3D
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1DEE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OzFdh-JATx2gvdoaYwFyuEh_Pj0.roa
Signing time:             Fri 01 Sep 2023 10:15:28 +0000
ROA not before:           Fri 01 Sep 2023 10:15:28 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     24163
IP address blocks:        49.158.192.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7662 (0x1dee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep  1 10:15:28 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=3B315D87E2404F1DA0BDDA1A630172B8487F3E3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:b7:58:b5:1c:e7:76:4f:7d:30:71:d5:e8:01:
                    cb:6d:94:2d:e3:e2:a9:d7:c2:69:43:6d:57:51:0a:
                    b1:1c:00:40:33:1c:02:0d:4c:4d:2a:0b:00:fd:dc:
                    4e:34:b1:c7:76:1f:71:fe:1b:e5:d7:04:0a:b2:1a:
                    84:51:85:44:b7:6e:5a:c2:38:a0:86:f1:9c:2e:d7:
                    52:05:ed:c2:22:b7:e6:56:4d:be:04:ad:ba:a1:0c:
                    6f:3f:3b:0d:33:5d:3d:6f:87:f7:b0:4b:93:9c:d5:
                    4a:cb:5d:65:ea:1a:f4:21:95:cd:63:aa:47:a8:94:
                    61:cf:9d:be:37:c7:1a:fc:d1:20:0a:19:75:60:04:
                    a8:f7:6e:f2:52:b5:8b:7b:43:15:c1:85:a3:e7:bd:
                    38:c4:d6:1f:ec:9f:c4:96:b3:65:4f:07:9b:e7:a0:
                    cc:68:ea:82:49:a0:ac:bf:f6:c7:75:8e:73:51:94:
                    51:0f:94:1b:b9:ca:e5:60:a9:35:c5:d8:f7:fd:17:
                    91:2d:76:64:f0:16:5c:13:17:41:93:1d:ed:33:40:
                    d1:b2:b6:c3:e8:ec:2b:e9:27:02:ca:d5:9e:1d:31:
                    9b:8f:8a:a7:4a:04:eb:ea:c9:e2:1b:bf:75:96:bb:
                    d8:32:c1:2e:88:de:c6:47:dc:be:e0:55:dd:8e:3c:
                    14:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:31:5D:87:E2:40:4F:1D:A0:BD:DA:1A:63:01:72:B8:48:7F:3E:3D
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OzFdh-JATx2gvdoaYwFyuEh_Pj0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:ee:79:1a:67:40:4f:1f:96:ce:20:10:67:ce:95:00:bc:8d:
         87:41:1f:d4:51:2e:76:3b:ba:ce:44:60:ad:bd:d1:91:bc:6d:
         bb:45:17:c1:a5:4c:05:ee:be:e9:98:d4:d3:03:99:86:3c:a3:
         c7:2d:f5:c5:3d:88:69:28:f4:e5:47:fe:aa:c7:0c:0c:18:cd:
         ad:c8:02:34:46:17:a3:ab:a4:26:fa:09:cf:4c:bb:c3:32:a0:
         33:8f:d6:67:1d:1e:f3:78:7b:19:e6:d1:32:73:a6:4d:f5:69:
         e1:58:2c:37:2d:83:02:2f:04:00:79:ae:5a:b1:c7:b1:1f:52:
         a9:72:2e:0b:69:ac:01:d1:fd:38:8d:de:1c:1c:26:a9:01:e4:
         e2:f1:07:04:21:b5:0a:12:58:70:aa:1c:7f:ed:33:1f:dc:d3:
         08:a6:0d:01:23:31:5f:de:56:2f:8c:95:08:e5:59:0c:37:bd:
         63:c4:1b:bf:bd:5a:a1:5d:65:e9:e2:b4:d6:0f:93:ba:89:8f:
         ff:38:b9:e5:11:69:6e:68:64:b6:0f:39:fd:e3:d7:a1:91:a2:
         68:71:4f:fa:c0:1a:cc:48:26:94:07:2b:33:fe:b8:b1:28:eb:
         08:b6:7b:8c:ed:15:ac:71:1a:a3:10:a5:e7:76:89:b1:ee:5e:
         e0:a5:57:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org